On Tue, Jan 21, 2003 at 10:59:14AM -0800, Guy Harris wrote: > It can be more accurately decoded by finding documentation for that > packet's format and adding code to the NETLOGON dissector to dissect > that packet based on that documentation, or perhaps by having some other > packet analyzer decode it (if any do) and having Ethereal dissect it > similarly.
Well, neither Microsoft Network Monitor nor Sniffer Pro seem to know what the heck an opcode of 17 is in a NETLOGON packet, so, unless somebody finds a sniffer that does know what it is, or finds documentation for it, or otherwise guesses what it is, it's not going to get dissected by Ethereal.
